Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

Citrix receiver PNAgent URL enumerates apps when not connected to domain, how?

Posted on 2014-10-14
6
Medium Priority
?
647 Views
Last Modified: 2014-10-21
Hello there,

When I have my laptop connected to wifi network at home or in train during travel, the Citrix Receiver with server address pointing to https://mycompanyname/citrix/pnagent/citrix.xml, can enumerate apps and deskops, even though I am not connected to my company's network.

How is this possible? How is the communication happening?

Am I missing anything here, that I am not understanding.

Please advise.

Thanks and Regards
0
Comment
Question by:goprasad
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
6 Comments
 
LVL 13

Expert Comment

by:Rizzle
ID: 40379536
Hi,

The applications may enumerating under a cached setting, what happens when you actually click on one?

I remember seeing this was once and the user could see their applications (Cached) but couldn't actually do anything with them.

Do you have Storefront in your environment?
0
 
LVL 13

Expert Comment

by:Rizzle
ID: 40379543
Unless the Citrix Receiver is pointing to the CAG in your environment?
0
 
LVL 24

Expert Comment

by:Dirk Kotte
ID: 40380844
is "mycompanyname" reacheble from the internet?
can you open https://mycompanyname/citrix/pnagent/citrix.xml within a browser and see  an XML output?

btw, the url should be the following:
https://mycompanyname/citrix/pnagent/config.xml
0
Use Case: Protecting a Hybrid Cloud Infrastructure

Microsoft Azure is rapidly becoming the norm in dynamic IT environments. This document describes the challenges that organizations face when protecting data in a hybrid cloud IT environment and presents a use case to demonstrate how Acronis Backup protects all data.

 

Author Comment

by:goprasad
ID: 40383030
when i browse to mycompanyname in browser, I get an XML output.

And yes URL should end with config.xml
0
 
LVL 13

Expert Comment

by:Rizzle
ID: 40383036
You didn't answer my questions?
0
 
LVL 24

Accepted Solution

by:
Dirk Kotte earned 2000 total points
ID: 40389759
Ok, seems you company publish the apps to the internet also.
There are different options how to accomplish this ... some secure , some not.
Your company may use a SSL gateway like CitrixAccessGateway (CAG), netscaler gateway or CitrixSecureGateway .
Also possible (but not secure) is to publish the webinterface-IIS directly using NAT at the firewall.

The first options are common and you should not  be surprised as a user.
if you are the responsible person for this environment or a security officer you should check this ;-)

and now the HOW:
your receiver connects to the published PNA-Site, receive the xml file you have seen already, send your authentication data (manually entered or from your session if pass-through is enabled) and the receiver gain access to your applications. Thats all.
0

Featured Post

Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In this article, I am going to show you how to simulate a multi-site Lab environment on a single Hyper-V host. I use this method successfully in my own lab to simulate three fully routed global AD Sites on a Windows 10 Hyper-V host.
A look into Log Analysis and Effective Critical Alerting.
How to install and configure Citrix XenApp 6.5 - Part 1. In this video tutorial we have explained step by step installation of Citrix XenApp 6.5 Server on Windows Server 2008 R2 is explained in this video. We have explained the difference between…
In this video tutorial I show you the main steps to install and configure  a VMware ESXi6.0 server. The video has my comments as text on the screen and you can pause anytime when needed. Hope this will be helpful. Verify that your hardware and BIO…

721 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question